CVE-2026-86218 N-Able N-Central
N-central is vulnerable to a pre-auth remote code execution This issue affects N-central: before 2026.3.1.14.
- CVSS
- 10.0 Critical
- EPSS
- 15%
- Percentile
- 97
- Published
- 2026-09-06
- Force
- 11 of 12
- Public PoC
- 3
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
On CISA’s exploited list
N-able N-central Static Code Injection Vulnerability
- Added
- 2026-09-08
- Federal patch deadline
- 2026-09-11
- Ransomware use
- not known